https://ctf-hallllow.blog/tags/eval-injection/ Recent content in Eval-Injection on hallllow Hugo en-us Wed, 04 Nov 2026 00:00:00 +0000 https://ctf-hallllow.blog/posts/craft/ Wed, 04 Nov 2026 00:00:00 +0000 https://ctf-hallllow.blog/posts/craft/ HTB Craft (Medium). A Gogs repo leaks dinesh's creds, the brewing API has an eval() injection in the abv parameter that lands a shell in a Docker container, the DB config leaks MySQL creds, the user table hands over gilfoyle, his repo holds an id_rsa for SSH (user.txt), and root falls by abusing a HashiCorp Vault SSH OTP role.